LibrePhotos / librephotos

A self-hosted open source photo management service. This is the repository of the backend.
MIT License
6.67k stars 290 forks source link

chore(deps): update dependency scikit-learn to v1 [security] #1298

Closed renovate[bot] closed 2 weeks ago

renovate[bot] commented 2 weeks ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
scikit-learn (source, changelog) <1.4.3 -> <1.5.1 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2024-5206

A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fixed in version 1.5.0. The vulnerability arises from the unexpected storage of all tokens present in the training data within the stop_words_ attribute, rather than only storing the subset of tokens required for the TF-IDF technique to function. This behavior leads to the potential leakage of sensitive information, as the stop_words_ attribute could contain tokens that were meant to be discarded and not stored, such as passwords or keys. The impact of this vulnerability varies based on the nature of the data being processed by the vectorizer.


Release Notes

scikit-learn/scikit-learn (scikit-learn) ### [`v1.5.0`](https://togithub.com/scikit-learn/scikit-learn/releases/tag/1.5.0): Scikit-learn 1.5.0 [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/1.4.2...1.5.0) We're happy to announce the 1.5.0 release. You can read the release highlights under https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights\_1\_5\_0.html and the long version of the change log under https://scikit-learn.org/stable/whats_new/v1.5.html This version supports Python versions 3.9 to 3.12. You can upgrade with pip as usual: pip install -U scikit-learn The conda-forge builds can be installed using: conda install -c conda-forge scikit-learn ### [`v1.4.2`](https://togithub.com/scikit-learn/scikit-learn/releases/tag/1.4.2): Scikit-learn 1.4.2 [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/1.4.1.post1...1.4.2) We're happy to announce the 1.4.2 release. This release only includes support for numpy 2. This version supports Python versions 3.9 to 3.12. You can upgrade with pip as usual: pip install -U scikit-learn ### [`v1.4.1.post1`](https://togithub.com/scikit-learn/scikit-learn/releases/tag/1.4.1.post1): Scikit-learn 1.4.1.post1 [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/1.4.0...1.4.1.post1) We're happy to announce the 1.4.1.post1 release. You can see the changelog here: https://scikit-learn.org/stable/whats_new/v1.4.html#version-1-4-1-post1 This version supports Python versions 3.9 to 3.12. You can upgrade with pip as usual: pip install -U scikit-learn The conda-forge builds can be installed using: conda install -c conda-forge scikit-learn ### [`v1.4.0`](https://togithub.com/scikit-learn/scikit-learn/compare/1.3.2...1.4.0) [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/1.3.2...1.4.0) ### [`v1.3.2`](https://togithub.com/scikit-learn/scikit-learn/releases/tag/1.3.2): Scikit-learn 1.3.2 [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/1.3.1...1.3.2) We're happy to announce the 1.3.2 release. You can see the changelog here: https://scikit-learn.org/stable/whats_new/v1.3.html#version-1-3-2 This version supports Python versions 3.8 to 3.12. You can upgrade with pip as usual: pip install -U scikit-learn The conda-forge builds can be installed using: conda install -c conda-forge scikit-learn ### [`v1.3.1`](https://togithub.com/scikit-learn/scikit-learn/releases/tag/1.3.1): Scikit-learn 1.3.1 [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/1.3.0...1.3.1) We're happy to announce the 1.3.1 release. You can see the changelog here: https://scikit-learn.org/stable/whats_new/v1.3.html#version-1-3-1 This version supports Python versions 3.8 to 3.12. You can upgrade with pip as usual: pip install -U scikit-learn The conda-forge builds can be installed using: conda install -c conda-forge scikit-learn ### [`v1.3.0`](https://togithub.com/scikit-learn/scikit-learn/releases/tag/1.3.0): Scikit-learn 1.3.0 [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/1.2.2...1.3.0) We're happy to announce the 1.3.0 release. You can read the release highlights under https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights\_1\_3\_0.html and the long version of the change log under https://scikit-learn.org/stable/whats_new/v1.3.html This version supports Python versions 3.8 to 3.11. You can upgrade with pip as usual: pip install -U scikit-learn The conda-forge builds can be installed using: conda install -c conda-forge scikit-learn ### [`v1.2.2`](https://togithub.com/scikit-learn/scikit-learn/releases/tag/1.2.2): Scikit-learn 1.2.2 [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/1.2.1...1.2.2) We're happy to announce the 1.2.2 release. You can see the changelog here: https://scikit-learn.org/stable/whats_new/v1.2.html#version-1-2-2 You can upgrade with pip as usual: pip install -U scikit-learn The conda-forge builds will be available shortly, which you can then install using: conda install -c conda-forge scikit-learn ### [`v1.2.1`](https://togithub.com/scikit-learn/scikit-learn/releases/tag/1.2.1): scikit-learn 1.2.1 [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/1.2.0...1.2.1) We're happy to announce the 1.2.1 release. You can see the changelog here: https://scikit-learn.org/stable/whats_new/v1.2.html#version-1-2-1 You can upgrade with pip as usual: pip install -U scikit-learn The conda-forge builds will be available shortly, which you can then install using: conda install -c conda-forge scikit-learn ### [`v1.2.0`](https://togithub.com/scikit-learn/scikit-learn/releases/tag/1.2.0): Scikit-learn 1.2.0 [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/1.1.3...1.2.0) We're happy to announce the 1.2.0 release. You can read the release highlights under https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights\_1\_2\_0.html and the long version of the change log under https://scikit-learn.org/stable/whats_new/v1.2.html This version supports Python versions 3.8 to 3.11. ### [`v1.1.3`](https://togithub.com/scikit-learn/scikit-learn/releases/tag/1.1.3): scikit-learn 1.1.3 [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/1.1.2...1.1.3) We're happy to announce the 1.1.3 release. This bugfix release only includes fixes for compatibility with the latest SciPy release >= 1.9.2 and wheels for Python 3.11. Note that support for 32-bit Python on Windows has been dropped in this release. This is due to the fact that SciPy 1.9.2 also dropped the support for that platform. Windows users are advised to install the 64-bit version of Python instead. You can see the changelog here: https://scikit-learn.org/dev/whats_new/v1.1.html#version-1-1-3 You can upgrade with pip as usual: pip install -U scikit-learn The conda-forge builds will be available shortly, which you can then install using: conda install -c conda-forge scikit-learn ### [`v1.1.2`](https://togithub.com/scikit-learn/scikit-learn/releases/tag/1.1.2): scikit-learn 1.1.2 [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/1.1.1...1.1.2) We're happy to announce the 1.1.2 release with several bugfixes: You can see the changelog here: https://scikit-learn.org/dev/whats_new/v1.1.html#version-1-1-2 You can upgrade with pip as usual: pip install -U scikit-learn The conda-forge builds will be available shortly, which you can then install using: conda install -c conda-forge scikit-learn ### [`v1.1.1`](https://togithub.com/scikit-learn/scikit-learn/releases/tag/1.1.1): scikit-learn 1.1.1 [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/1.1.0...1.1.1) We're happy to announce the 1.1.1 release with several bugfixes: You can see the changelog here: https://scikit-learn.org/dev/whats_new/v1.1.html#version-1-1-1 You can upgrade with pip as usual: pip install -U scikit-learn The conda-forge builds will be available shortly, which you can then install using: conda install -c conda-forge scikit-learn ### [`v1.1.0`](https://togithub.com/scikit-learn/scikit-learn/releases/tag/1.1.0): scikit-learn 1.1.0 [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/1.0.2...1.1.0) We're happy to announce the 1.1.0 release. You can read the release highlights under https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights\_1\_1\_0.html and the long version of the change log under https://scikit-learn.org/stable/whats_new/v1.1.html#changes-1-1 This version supports Python versions 3.8 to 3.10. ### [`v1.0.2`](https://togithub.com/scikit-learn/scikit-learn/releases/tag/1.0.2): scikit-learn 1.0.2 [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/1.0.1...1.0.2) We're happy to announce the 1.0.2 release with several bugfixes: You can see the changelog here: https://scikit-learn.org/dev/whats_new/v1.0.html#version-1-0-2 You can upgrade with pip as usual: pip install -U scikit-learn The conda-forge builds will be available shortly, which you can then install using: conda install -c conda-forge scikit-learn ### [`v1.0.1`](https://togithub.com/scikit-learn/scikit-learn/releases/tag/1.0.1): scikit-learn 1.0.1 [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/1.0...1.0.1) We're happy to announce the 1.0.1 release with several bugfixes: You can see the changelog here: https://scikit-learn.org/dev/whats_new/v1.0.html#version-1-0-1 You can upgrade with pip as usual: pip install -U scikit-learn The conda-forge builds will be available shortly, which you can then install using: conda install -c conda-forge scikit-learn ### [`v1.0`](https://togithub.com/scikit-learn/scikit-learn/releases/tag/1.0): scikit-learn 1.0 [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.24.2...1.0) We're happy to announce the 1.0 release. You can read the release highlights under https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights\_1\_0\_0.html and the long version of the change log under https://scikit-learn.org/stable/whats_new/v1.0.html#changes-1-0 This version supports Python versions 3.7 to 3.9. ### [`v0.24.2`](https://togithub.com/scikit-learn/scikit-learn/releases/tag/0.24.2): scikit-learn 0.24.2 [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.24.1...0.24.2) We're happy to announce the 0.24.2 release with several bugfixes: You can see the changelog here: https://scikit-learn.org/stable/whats_new/v0.24.html#version-0-24-2 You can upgrade with pip as usual: pip install -U scikit-learn The conda-forge builds will be available shortly, which you can then install using: conda install -c conda-forge scikit-learn ### [`v0.24.1`](https://togithub.com/scikit-learn/scikit-learn/releases/tag/0.24.1): scikit-learn 0.24.1 [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.24.0...0.24.1) We're happy to announce the 0.24.1 release with several bugfixes: You can see the changelog here: https://scikit-learn.org/stable/whats_new/v0.24.html#version-0-24-1 You can upgrade with pip as usual: pip install -U scikit-learn The conda-forge builds will be available shortly, which you can then install using: conda install -c conda-forge scikit-learn ### [`v0.24.0`](https://togithub.com/scikit-learn/scikit-learn/releases/tag/0.24.0): scikit-learn 0.24.0 [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.23.2...0.24.0) We're happy to announce the 0.24 release. You can read the release highlights under https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights\_0\_24\_0.html and the long version of the change log under https://scikit-learn.org/stable/whats_new/v0.24.html#version-0-24-0 This version supports Python versions 3.6 to 3.9. ### [`v0.23.2`](https://togithub.com/scikit-learn/scikit-learn/releases/tag/0.23.2): scikit-learn 0.23.2 [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.23.1...0.23.2) We're happy to announce the 0.23.2 release with several bugfixes: You can see the changelog here: https://scikit-learn.org/stable/whats_new/v0.23.html#version-0-23-2 You can upgrade with pip as usual: pip install -U scikit-learn The conda-forge builds will be available shortly, which you can then install using: conda install -c conda-forge scikit-learn ### [`v0.23.1`](https://togithub.com/scikit-learn/scikit-learn/releases/tag/0.23.1): scikit-learn 0.23.1 [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.23.0...0.23.1) We're happy to announce the 0.23.1 release which fixes a few issues affecting many users, namely: K-Means should be faster for small sample sizes, and the representation of third-party estimators was fixed. You can check this version out using:     pip install -U scikit-learn You can see the changelog here: https://scikit-learn.org/stable/whats_new/v0.23.html#version-0-23-1 The conda-forge builds will be available shortly, which you can then install using:     conda install -c conda-forge scikit-learn ### [`v0.23.0`](https://togithub.com/scikit-learn/scikit-learn/releases/tag/0.23.0): scikit-learn 0.23.0 [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.22.2.post1...0.23.0) We're happy to announce the 0.23 release. You can read the release highlights under https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights\_0\_23\_0.html and the long version of the change log under https://scikit-learn.org/stable/whats_new/v0.23.html#version-0-23-0 This version supports Python versions 3.6 to 3.8. ### [`v0.22.2.post1`](https://togithub.com/scikit-learn/scikit-learn/releases/tag/0.22.2.post1): Scikit-learn 0.22.2.post1 [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.22.2...0.22.2.post1) We're happy to announce the 0.22.2.post1 bugfix release. The 0.22.2.post1 release includes a packaging fix for the source distribution but the content of the packages is otherwise identical to the content of the wheels with the 0.22.2 version (without the .post1 suffix). Change log under https://scikit-learn.org/stable/whats_new/v0.22.html#changes-0-22-2. This version supports Python versions 3.5 to 3.8. ### [`v0.22.2`](https://togithub.com/scikit-learn/scikit-learn/compare/0.22.1...0.22.2) [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.22.1...0.22.2) ### [`v0.22.1`](https://togithub.com/scikit-learn/scikit-learn/releases/tag/0.22.1): Scikit-learn 0.22.1 [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.22...0.22.1) We're happy to announce the 0.22.1 bugfix release. Change log under https://scikit-learn.org/stable/whats_new/v0.22.html#changes-0-22-1. This version supports Python versions 3.5 to 3.8. ### [`v0.22`](https://togithub.com/scikit-learn/scikit-learn/releases/tag/0.22): Scikit-learn 0.22.0 [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.21.3...0.22) We're happy to announce the 0.22 release. You can read the release highlights under https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights\_0\_22\_0.html and the long version of the change log under https://scikit-learn.org/stable/whats_new/v0.22.html#changes-0-22. This version supports Python versions 3.5 to 3.8. ### [`v0.21.3`](https://togithub.com/scikit-learn/scikit-learn/releases/tag/0.21.3): Scikit-learn 0.21.3 [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.21.2...0.21.3) A bug fix and documentation release, fixing regressions and other issues released in version 0.21. See change log at https://scikit-learn.org/0.21/whats_new/v0.21.html ### [`v0.21.2`](https://togithub.com/scikit-learn/scikit-learn/releases/tag/0.21.2): Scikit-learn 0.21.2 [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.21.1...0.21.2) This version fixes a few bugs released in 0.21.1. ### [`v0.21.1`](https://togithub.com/scikit-learn/scikit-learn/releases/tag/0.21.1): Scikit-learn version 0.21.1 [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.21.0...0.21.1) See changes at https://scikit-learn.org/0.21/whats_new/v0.21.html Fixes some packaging issues in version 0.21.0 along with a few bugs. ### [`v0.21.0`](https://togithub.com/scikit-learn/scikit-learn/releases/tag/0.21.0): Scikit-learn version 0.21.0 [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.20.4...0.21.0) A new release of Scikit-learn with many new features, enhancements and bug fixes. See https://scikit-learn.org/0.21/whats_new/v0.21.html ### [`v0.20.4`](https://togithub.com/scikit-learn/scikit-learn/releases/tag/0.20.4): Scikit-learn 0.20.4 [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.20.3...0.20.4) Builds on top of Scikit-learn 0.20.3 to fix regressions and other issues released in version 0.20. See change log at https://scikit-learn.org/0.20/whats_new/v0.20.html ### [`v0.20.3`](https://togithub.com/scikit-learn/scikit-learn/releases/tag/0.20.3): Scikit-learn 0.20.3 [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.20.2...0.20.3) A bug-fix release in the 0.20 series, supporting Python 2 and 3 ### [`v0.20.2`](https://togithub.com/scikit-learn/scikit-learn/releases/tag/0.20.2): Scikit-learn 0.20.2 [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.20.1...0.20.2) Bug-fix release to the 0.20 branch, supporting Python 2 and 3 ### [`v0.20.1`](https://togithub.com/scikit-learn/scikit-learn/releases/tag/0.20.1): Scikit-learn 0.20.1 [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.20.0...0.20.1) Released 21 November 2018. See changelog at https://scikit-learn.org/0.20/whats_new.html#version-0-20-1 ### [`v0.20.0`](https://togithub.com/scikit-learn/scikit-learn/releases/tag/0.20.0): Scikit-learn 0.20.0 [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.19.2...0.20.0) Released 25 September 2018 See changelog at https://scikit-learn.org/0.20/whats_new.html#version-0-20-0 ### [`v0.19.2`](https://togithub.com/scikit-learn/scikit-learn/releases/tag/0.19.2): Scikit-learn 0.19.2 [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.19.1...0.19.2) Released in July 2018, exclusively in order to support Python 3.7 in the 0.19.X branch. ### [`v0.19.1`](https://togithub.com/scikit-learn/scikit-learn/compare/0.19.0...0.19.1) [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.19.0...0.19.1) ### [`v0.19.0`](https://togithub.com/scikit-learn/scikit-learn/compare/0.18.2...0.19.0) [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.18.2...0.19.0) ### [`v0.18.2`](https://togithub.com/scikit-learn/scikit-learn/compare/0.18.1...0.18.2) [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.18.1...0.18.2) ### [`v0.18.1`](https://togithub.com/scikit-learn/scikit-learn/releases/tag/0.18.1): Bugfix release [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.18...0.18.1) ### [`v0.18`](https://togithub.com/scikit-learn/scikit-learn/compare/0.17.1...0.18) [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.17.1...0.18) ### [`v0.17.1`](https://togithub.com/scikit-learn/scikit-learn/compare/0.17...0.17.1) [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.17...0.17.1) ### [`v0.17`](https://togithub.com/scikit-learn/scikit-learn/compare/0.16.1...0.17) [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.16.1...0.17) ### [`v0.16.1`](https://togithub.com/scikit-learn/scikit-learn/compare/0.16.0...0.16.1) [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.16.0...0.16.1) ### [`v0.16.0`](https://togithub.com/scikit-learn/scikit-learn/compare/0.15.2...0.16.0) [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.15.2...0.16.0) ### [`v0.15.2`](https://togithub.com/scikit-learn/scikit-learn/compare/0.15.1...0.15.2) [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.15.1...0.15.2) ### [`v0.15.1`](https://togithub.com/scikit-learn/scikit-learn/compare/0.15.0...0.15.1) [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.15.0...0.15.1) ### [`v0.15.0`](https://togithub.com/scikit-learn/scikit-learn/compare/0.14.1...0.15.0) [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.14.1...0.15.0) ### [`v0.14.1`](https://togithub.com/scikit-learn/scikit-learn/compare/0.14...0.14.1) [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.14...0.14.1) ### [`v0.14`](https://togithub.com/scikit-learn/scikit-learn/compare/0.13.1...0.14) [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.13.1...0.14) ### [`v0.13.1`](https://togithub.com/scikit-learn/scikit-learn/compare/0.13...0.13.1) [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.13...0.13.1) ### [`v0.13`](https://togithub.com/scikit-learn/scikit-learn/compare/0.12.1...0.13) [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.12.1...0.13) ### [`v0.12.1`](https://togithub.com/scikit-learn/scikit-learn/compare/0.12...0.12.1) [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.12...0.12.1) ### [`v0.12`](https://togithub.com/scikit-learn/scikit-learn/compare/0.11...0.12) [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.11...0.12) ### [`v0.11`](https://togithub.com/scikit-learn/scikit-learn/compare/0.10...0.11) [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.10...0.11) ### [`v0.10`](https://togithub.com/scikit-learn/scikit-learn/compare/0.9...0.10) [Compare Source](https://togithub.com/scikit-learn/scikit-learn/compare/0.9...0.10)

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR has been generated by Mend Renovate. View repository job log here.

sonarcloud[bot] commented 2 weeks ago

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarCloud